2,474 reputation
11221
bio website
location
age
visits member for 3 years, 1 month
seen 23 hours ago

Sep
15
revised Avoid being implicated in criminal activity when using Tor
retag: add legal
Sep
15
suggested suggested edit on Avoid being implicated in criminal activity when using Tor
Sep
13
comment Does a OS manufacturer have permission to access your computer unauthorized?
@TerryChia "off-topic because it is about the legalities of the matter, which isn't accepted here" Really? Since when? Why do we have a legal tag?
Sep
9
comment Is it possible to make one processor look like another?
http://www.urbanmyth.org/microcode/ -> not found :(
Sep
8
comment ARP poisoning between a wired and wireless network
Open Wifi ou WPA?
Sep
7
comment Figure out how internet access is being monitored
@Iszi "Privacy rights when you're using someone else's computer or network in general, absent explicit agreements otherwise, should be expected to be non-existent." It depends in which jurisdiction. In France, even using the employer computer and network, an employee has privacy rights.
Sep
3
comment Is the Web browser status bar always trustable?
@MrJamin "The ping attribute, if present, gives the URLs of the resources that are interested in being notified if the user follows the hyperlink. The value must be a set of space-separated tokens, each of which must be a valid non-empty URL. The value is used by the user agent for hyperlink auditing" Links created by a and area elements See also jibbering.com/blog/?p=192
Sep
3
comment Is the Web browser status bar always trustable?
"for browsers like Chrome where the address pop-up appears inside the page area" it seems that the Chrome designers did not bother with a reserved, separated, impossible to spoof status bar (such as the FF status bar if you disable JS changing of the status) because they did not believed the status bar had any security benefits.
Sep
3
answered Is the Web browser status bar always trustable?
Sep
3
revised Do salts have to be random, or just unique and unknown?
retag: add password, hash, salt
Sep
3
comment Is the Web browser status bar always trustable?
Where is Chrome "status bar"?
Sep
3
comment Is the Web browser status bar always trustable?
@RBerteig Yes: some people copy and post the Google feedback URL to forums instead of the destination URL. Google should use PING (and browser should enable PING whenever they allow this destination hiding).
Sep
3
comment Is there any reason to show the same message for invalid username as password?
Rate Limit globally? by origin IP?
Sep
3
suggested suggested edit on Do salts have to be random, or just unique and unknown?
Sep
2
comment Do salts have to be random, or just unique and unknown?
let us continue this discussion in chat
Sep
1
comment Do salts have to be random, or just unique and unknown?
@MisterMelancholy "unknown" "entropy" I think you need to check the definition of "entropy". It does not mean "I don't know the answer", it is bound on the probability of correctly guessing the answer with x tries. Practically, a lot of entropy means you cannot guess the correct answer, ever, even if you try as much as you can in a lifetime.
Aug
28
comment How can I implement DVD copy protection?
@FakeRainBrigand This is a general principle. For any standard protection method that is not so good, since there is market and it is doable, there will be a tool, it will be available on the Internet, and people with zero CS knowledge will be able to use it.
Aug
27
comment Please help verify my understanding of Domain Validation (DV) SSL Certificate
What about a browser who has just seen an EV certificate, who sees another cert?
Aug
27
comment Please help verify my understanding of Domain Validation (DV) SSL Certificate
"An EV certificate will protect you against sloppy CA only as long as your clients are trained to pause and become suspicious if they see a seemingly valid but non-EV certificate bearing your site name." and by client, you mean client software, right?
Aug
27
comment What does capture filter means in wireshark?
Libpcap filter syntax may not be user friendly, but on a busy interface, you probably need to learn it if you don't want to deal with huge capture files.